Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa
File:                     34352e3138302e39382e302f32342d3234203d3e20323639313238.roa (raw, json)
Hash identifier:          uchAOwHXr+FIq3jL3kzxgUd5nBKuevI3BzWqt85575w=
Subject key identifier:   6D:38:B3:D8:5D:57:48:2D:A2:D3:A7:00:DC:4C:9C:0A:77:07:5F:BE
Certificate issuer:       /CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
Certificate serial:       60502BDCD8E52ACBF75C0B58B4928697A85CF149
Authority key identifier: F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa
Signing time:             Thu 06 Mar 2025 09:00:34 +0000
ROA not before:           Thu 06 Mar 2025 08:55:34 +0000
ROA not after:            Thu 05 Mar 2026 09:00:34 +0000
asID:                     269128
IP address blocks:        45.180.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl
                          rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 13:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:50:2b:dc:d8:e5:2a:cb:f7:5c:0b:58:b4:92:86:97:a8:5c:f1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4CE893E9874372932D6054F7AFDD9FBBD021974
        Validity
            Not Before: Mar  6 08:55:34 2025 GMT
            Not After : Mar  5 09:00:34 2026 GMT
        Subject: CN=6D38B3D85D57482DA2D3A700DC4C9C0A77075FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:43:40:83:72:ee:27:92:d3:eb:fa:31:d1:98:
                    08:1b:74:80:cc:60:5b:ec:86:7e:ba:71:3e:e9:d3:
                    6f:d6:b7:a2:57:d2:18:6f:aa:de:95:cd:03:11:17:
                    23:74:60:ed:49:b3:18:30:cc:81:10:3e:1c:16:f8:
                    e8:9e:f9:75:b0:b0:d8:6f:03:c2:68:ad:43:d9:ef:
                    be:8c:ac:ff:32:6b:89:dd:ef:3a:e1:6e:f7:65:60:
                    a7:98:70:55:61:80:27:ea:f7:97:a5:e1:82:b0:6e:
                    86:86:3e:5e:f0:50:6d:e2:1d:ae:65:71:93:8c:26:
                    68:c9:c4:ca:40:e5:d6:b4:9a:5a:8f:f6:d6:5a:0a:
                    70:b1:2a:91:05:aa:b4:e0:e4:09:74:16:17:ff:c7:
                    56:3c:a5:ef:c1:1f:da:72:3e:7e:de:04:9f:f6:d7:
                    65:91:23:e1:a9:fc:73:c2:5c:13:6a:cf:76:de:a3:
                    f7:5a:65:58:03:88:da:1d:46:23:10:45:18:c9:27:
                    8f:9a:6a:f7:a5:57:4f:4a:88:87:77:64:0c:0a:0b:
                    4d:7e:76:9c:6b:51:01:3f:78:63:75:85:a6:b7:2c:
                    15:fb:52:12:97:e5:71:67:21:93:b4:d6:19:aa:eb:
                    7b:ab:f3:d8:d7:af:63:c1:d4:b9:f4:24:23:96:11:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:38:B3:D8:5D:57:48:2D:A2:D3:A7:00:DC:4C:9C:0A:77:07:5F:BE
            X509v3 Authority Key Identifier:
                keyid:F4:CE:89:3E:98:74:37:29:32:D6:05:4F:7A:FD:D9:FB:BD:02:19:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CE893E9874372932D6054F7AFDD9FBBD021974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/1/34352e3138302e39382e302f32342d3234203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:52:29:71:66:b1:aa:89:12:95:74:c7:6e:46:7f:94:b5:3e:
         78:89:e9:f8:86:48:21:c2:d4:5f:30:d0:f9:0e:99:c9:3d:91:
         7d:c5:f7:ba:af:3a:43:b2:b5:cb:60:f4:4e:a8:cc:16:4b:01:
         99:d0:8f:20:94:6c:e9:86:b0:67:c9:c0:12:de:5d:cb:71:dd:
         9b:d8:54:da:8f:2d:39:5b:46:7b:3e:29:0d:ef:0d:2a:e7:4f:
         6f:54:98:d5:56:96:d3:61:4b:e6:f3:41:a9:d6:c3:a3:6e:15:
         89:d3:d7:ca:08:de:6a:24:58:50:a1:0f:b0:95:e7:d1:ff:ff:
         63:f9:cd:8d:85:6b:c3:bb:1f:9a:27:0c:94:96:ef:6f:2f:d9:
         5b:0d:9e:4a:ce:d6:26:d8:15:0e:76:f5:4f:b3:41:17:29:11:
         e6:03:88:0d:bd:7e:bc:ef:12:05:3b:2d:05:99:ab:8b:10:a8:
         09:99:1c:65:ba:1c:3c:d6:4d:4e:6b:e9:21:9f:91:f1:72:2d:
         1d:b1:b7:84:cf:f2:ae:78:46:23:bf:4b:b9:4b:a0:08:ff:f3:
         f7:0f:3e:c1:ee:7f:a9:17:f8:8c:62:32:2c:5d:5d:be:44:3a:
         ea:4a:8f:1f:63:0e:0d:78:af:5c:0f:50:94:f5:8c:79:d3:cf:
         d0:d9:06:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:21 2025 by rpki-client